Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7488.roa
File: AS7488.roa (raw, json)
Hash identifier: Gg5ep3EOXJPzFh9mLDlE5KpemJXmBRBGOdvPixMYERk=
Subject key identifier: 8E:F0:D9:3E:D9:D5:3C:65:5B:B2:CF:69:8B:69:2C:D6:D9:80:35:BE
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 0E4CF8140105A02729FB310997106CF6506043EC
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7488.roa
Signing time: Fri 26 Jun 2026 04:35:33 +0000
ROA not before: Fri 26 Jun 2026 04:30:33 +0000
ROA not after: Fri 25 Jun 2027 04:35:33 +0000
asID: 7488
IP address blocks: 140.233.175.0/24 maxlen: 24
148.135.196.0/24 maxlen: 24
148.135.197.0/24 maxlen: 24
148.135.204.0/24 maxlen: 24
148.135.205.0/24 maxlen: 24
150.241.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:f8:14:01:05:a0:27:29:fb:31:09:97:10:6c:f6:50:60:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jun 26 04:30:33 2026 GMT
Not After : Jun 25 04:35:33 2027 GMT
Subject: CN=8EF0D93ED9D53C655BB2CF698B692CD6D98035BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:91:c2:ee:2f:fb:fc:47:79:f7:64:20:4a:
6d:3e:69:f7:5f:e9:d6:d2:2b:13:41:09:12:ef:22:
f2:f8:6d:70:f4:8a:4e:aa:6f:41:d4:d5:71:28:ab:
11:16:d9:f9:13:b5:06:8f:f9:40:2f:e7:20:ea:13:
76:f5:ec:b3:d0:15:fd:23:d6:a6:db:9c:b4:5e:18:
5e:25:f3:70:5d:8e:4c:9f:71:9d:10:2c:78:6a:0d:
28:5f:9b:72:01:3e:cc:aa:60:9b:f0:e5:aa:09:1f:
ec:b7:7b:c8:a2:2d:94:46:b6:a6:8b:e9:dd:12:bf:
2a:fb:a2:6b:c4:68:c7:27:8b:20:e6:dd:ca:c7:ff:
4a:a3:7d:3c:b1:e1:09:08:57:12:7d:cd:6f:da:b2:
2f:0d:3d:34:8c:20:99:63:d6:71:c7:28:4d:19:e9:
8c:7a:53:2d:fc:cd:36:84:f9:4e:c6:e1:43:68:c2:
0e:dc:99:85:2f:e2:50:14:d9:b3:96:3e:7b:5b:1d:
8d:e4:14:3e:68:71:6b:b3:78:7d:9f:5a:7a:28:b6:
17:b7:1f:09:41:e0:de:e4:5a:15:d3:73:ce:ba:c4:
ca:80:74:84:cc:a5:cd:8d:81:99:c5:b8:65:05:34:
77:36:2e:68:13:ec:09:9b:6e:21:3e:17:e9:f5:20:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:D9:3E:D9:D5:3C:65:5B:B2:CF:69:8B:69:2C:D6:D9:80:35:BE
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS7488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.233.175.0/24
148.135.196.0/23
148.135.204.0/23
150.241.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d8:e6:49:d3:4e:6d:7f:4f:9b:e8:d3:e6:8b:a0:0a:a7:af:
ea:1a:a0:02:4f:8e:15:da:39:42:65:d6:dc:3c:cc:13:96:17:
d1:33:7a:fe:18:11:e3:0c:ff:a9:dc:39:1c:70:c3:45:1b:5d:
44:c4:70:80:e4:cf:85:8b:23:b9:8b:51:bc:94:be:b6:4a:47:
c4:a5:ea:00:16:dc:59:8b:61:f6:4b:e4:c9:03:cf:d5:11:c7:
37:48:fd:b1:96:12:04:d0:01:84:ee:06:3b:08:0f:8e:eb:4f:
af:a9:e4:64:bc:fc:92:f2:d6:c0:84:a8:0f:a3:f0:49:3d:0b:
34:dc:14:ee:fd:73:c1:fc:58:2f:6e:15:a3:e4:d3:9c:0d:92:
e7:91:28:55:05:1a:61:98:9a:dd:54:c8:89:1c:11:16:63:b8:
d3:55:80:7c:4d:de:2d:6a:8c:2f:eb:ca:97:71:b1:19:57:54:
6f:49:12:c9:61:12:c9:94:86:0d:b3:70:2b:b2:57:fd:88:2c:
38:f0:b0:2b:c2:fd:10:3a:c2:7d:89:79:6f:e5:02:ce:8f:29:
ce:aa:c0:ea:51:84:4d:05:98:f7:02:20:21:15:a8:09:08:b6:
5d:ce:74:8e:11:44:35:f1:34:72:e7:f5:75:74:8d:1e:71:fb:
92:68:f2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:20 2026 by rpki-client